c:\Users\Administrator\Desktop\Putin\@mecenaty\123.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fac94eae613cee23134f2803febed017_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fac94eae613cee23134f2803febed017_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fac94eae613cee23134f2803febed017_JaffaCakes118
-
Size
7KB
-
MD5
fac94eae613cee23134f2803febed017
-
SHA1
9a67f998f338e18f8c447a983050ed3421af9ab1
-
SHA256
1c0d8773452f1ef70567264d13baa807b0cd3e87de3ef5d31d72a983cb243d3b
-
SHA512
4177cab89e822130b8e8d3074a2924e020594e0ad477ead9da6b74d7d8f019a129bc1de25374599c530a558c4a1ee6c69471141e96aa01cf88d7cc26ae156c93
-
SSDEEP
96:+ccMbqsAJRuWMQalEYd7UWimDJZqRpsZRruzNt:pcMbqsOFaaYytmDJ68c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fac94eae613cee23134f2803febed017_JaffaCakes118
Files
-
fac94eae613cee23134f2803febed017_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ